aws ec2 create-network-acl-entry
Creates an entry (a rule) in a network ACL with the specified rule number. AWS CLI reference
10 options Its page in the AWS CLI reference
Options
--cidr-blockThe IPv4 network range to allow or deny, in CIDR notation (for example 172.16.0.0/24).--dry-runChecks whether you have the required permissions for the action, without actually making the request, and provides an error response.--icmp-type-codeICMP protocol: The ICMP or ICMPv6 type and code.--ingress, --egressIndicates whether this is an egress rule (rule is applied to traffic leaving the subnet).--ipv6-cidr-blockThe IPv6 network range to allow or deny, in CIDR notation (for example 2001:db8:1234:1a00::/64).--network-acl-idThe ID of the network ACL.--port-rangeTCP or UDP protocols: The range of ports the rule applies to.--protocolThe protocol number.--rule-actionIndicates whether to allow or deny the traffic that matches the rule.--rule-numberThe rule number for the entry (for example, 100).